uMatrix for Firefox Changelog

What's new in uMatrix for Firefox 1.4.4

Jul 20, 2021
  • Fixes:
  • Fix exception thrown when a stock asset is removed
  • Remove obsolete assets

New in uMatrix for Firefox 1.4.1 Beta 6 (Feb 25, 2020)

  • New:
  • Ability to reveal the canonical names of aliased hostnames.
  • The corresponding switch-based rule is:
  • cname-reveal: [scope] true
  • By default, the rule cname-reveal: * true is created in new installations of uMatrix. For existing installations, you will have to add it yourself if you want canonical names to be reported in the matrix everywhere by default. This new feature is supported only in Firefox.

New in uMatrix for Firefox 1.3.17 RC4 (May 29, 2019)

  • Core:
  • Cookies missing on very first request if website has service worker with fetch event handler
  • Incorrect display of hostnames with numbers in the logger
  • Custom recipe does not appear
  • Requests bypass uMatrix on Firefox start

New in uMatrix for Firefox 1.3.17 RC3 (May 27, 2019)

  • Closed as fixed:
  • Core:
  • Cookies missing on very first request if website has service worker with fetch event handler
  • Incorrect display of hostnames with numbers in the logger
  • Custom recipe does not appear
  • Requests bypass uMatrix on Firefox start

New in uMatrix for Firefox 1.3.17 RC2 (May 22, 2019)

  • Closed as fixed:
  • Core:
  • Cookies missing on very first request if website has service worker with fetch event handler
  • Incorrect display of hostnames with numbers in the logger
  • Custom recipe does not appear
  • Requests bypass uMatrix on Firefox start
  • Pull requests:
  • Show placeholder for blocked frame elements by xofe
  • More unused code cleaning by rhendric
  • Cleaning by rhendric
  • Minor fixes by xofe

New in uMatrix for Firefox 1.3.17 RC 1 (May 21, 2019)

  • Changes:
  • A new raw setting has been added: suspendTabsUntilReady. The purpose is exactly the same as the same setting in uBlock Origin, so you can refer to uBO's documentation. That setting is taken into account only with Chromium-based browsers, as Firefox is properly equipped to deal with network requests fired before uMatrix is ready.
  • Closed as fixed:
  • Chromium 72+
  • Cookies leaking temporarily
  • Core:
  • Cookies missing on very first request if website has service worker with fetch event handler
  • Incorrect display of hostnames with numbers in the logger
  • Custom recipe does not appear
  • Requests bypass uMatrix on Firefox start

New in uMatrix for Firefox 1.3.17 Beta 2 (Apr 9, 2019)

  • Changes:
  • A new raw setting has been added: suspendTabsUntilReady. The purpose is exactly the same as the same setting in uBlock Origin, so you can refer to uBO's documentation. That setting is taken into account only with Chromium-based browsers, as Firefox is properly equipped to deal with network requests fired before uMatrix is ready.
  • Core:
  • Custom recipe does not appear
  • Requests bypass uMatrix on Firefox start

New in uMatrix for Firefox 1.3.15 RC2 (Dec 26, 2018)

  • Changes:
  • Icons:
  • Little by little I will be migrating from font-based icons toward SVG-based icons. See uBlockOrigin/uMatrix-issues#68
  • Logger
  • The popup panel is now tab selector-bound (rather than logger entry-bound), i.e. it is associated with the tab currently selected.
  • There is a new UI to allow setting rules on a per logger entry basis (click the 3rd column): it is similar in look and use to the matrix UI, but it is minimalist: rules which are relevant only for the current entry in the logger are shown.
  • Two columns have been added:
  • a column to provide the scope in which network requests are made;
  • a column to provide visual hint for the third-partiness of requests.
  • The visual to represent tabless network requests has been modified. Tabless network requests will now be represented with "curtains" in the 3rd column.
  • Closed as fixed:
  • Firefox
  • "Corrupted Content Error"
  • Logger not working in sidebar
  • When pasting multiple lines into the rules editor they are joined together in a single line
  • Is there a way to disable javascript in local file:// for firefox?
  • The idea for the fix has been borrowed from NoScript: use a DOM-based <meta http-equiv=...> tag to inject CSP directives. This will apply only to documents fetched using file: scheme.
  • The fix requires the API browser.contentScripts, which only Firefox supports.
  • Core
  • Migrate icons to FontAwesome svg files (from the font file)
  • Race condition potentially causing auto-update to be disregarded at launch time
  • Behind-the-scene broken at gmail
  • Images, videos opened directly in a tab are bypassing respective block rules
  • Multiple Redirects Fail
  • Some entries are only briefly shown in uMatrix

New in uMatrix for Firefox 1.3.15 RC0 (Oct 8, 2018)

  • Changes:
  • Icons:
  • Little by little I will be migrating from font-based icons toward SVG-based icons. See uBlockOrigin/uMatrix-issues#68. Some of the icons in the latest FontAwesome package -- which now ships with SVG version of all icons -- have been redesigned by the author, so expect some of the icons may look different.
  • Logger:
  • The popup panel is now tab selector-bound (rather than logger entry-bound), i.e. it is associated with the tab currently selected.
  • There is a new UI to allow setting rules on a per logger entry basis (click the 3rd column): it is similar in look and use to the matrix UI, but it is minimalist: rules which are relevant only for the current entry in the logger are shown.
  • Two columns have been added:
  • a column to provide the scope in which network requests are made;
  • a column to provide visual hint for the third-partiness of requests.

New in uMatrix for Firefox 1.3.15 Beta 7 (Oct 1, 2018)

  • Logger:
  • The popup panel is now tab selector-bound (rather than logger entry-bound), i.e. it is associated with the tab currently selected.
  • There is a new UI to allow setting rules on a per logger entry basis (click the 3rd column): it is similar in look and use to the matrix UI, but it is minimalist: rules which are relevant only for the current entry in the logger are shown.
  • Two columns have been added:
  • A column to provide the scope in which network requests are made;
  • A column to provide visual hint for the third-partiness of requests.
  • Firefox:
  • When pasting multiple lines into the rules editor they are joined together in a single line
  • Is there a way to disable javascript in local file:// for firefox?
  • The idea for the fix has been borrowed from NoScript: use a DOM-based <meta http-equiv=...> tag to inject CSP directives. This will apply only to documents fetched using file: scheme.
  • The fix requires the API browser.contentScripts, which only Firefox supports.
  • Core:
  • Behind-the-scene broken at gmail
  • Race condition potentially causing auto-update to be disregarded at launch time
  • Multiple Redirects Fail
  • Some entries are only briefly shown in uMatrix

New in uMatrix for Firefox 1.3.15 Beta 4 (Sep 26, 2018)

  • Firefox:
  • When pasting multiple lines into the rules editor they are joined together in a single line
  • Is there a way to disable javascript in local file:// for firefox?
  • The idea for the fix has been borrowed from NoScript: use a DOM-based <meta http-equiv=...> tag to inject CSP directives. This will apply only to documents fetched using file: scheme.
  • The fix requires the API browser.contentScripts, which only Firefox supports.
  • Core:
  • Race condition potentially causing auto-update to be disregarded at launch time
  • Multiple Redirects Fail

New in uMatrix for Firefox 1.3.15 Beta 3 (Sep 26, 2018)

  • Firefox:
  • Is there a way to disable javascript in local file:// for firefox?
  • The idea for the fix has been borrowed from NoScript: use a DOM-based <meta http-equiv=...> tag to inject CSP directives. This will apply only to documents fetched using file: scheme.
  • The fix requires the API browser.contentScripts, which only Firefox supports.
  • Core:
  • Race condition potentially causing auto-update to be disregarded at launch time
  • Multiple Redirects Fail

New in uMatrix for Firefox 1.3.15 Beta 2 (Sep 17, 2018)

  • Is there a way to disable javascript in local file:// for firefox?
  • The idea for the fix has been borrowed from NoScript: use a DOM-based <meta http-equiv=...> tag to inject CSP directives. This will apply only to documents fetched using file: scheme.
  • The fix requires the API browser.contentScripts, which only Firefox supports.
  • Core:
  • Multiple Redirects Fail

New in uMatrix for Firefox 1.3.15 Beta (Sep 14, 2018)

  • Multiple Redirects Fail

New in uMatrix for Firefox 1.3.14 (Aug 27, 2018)

  • Firefox:
  • uMatrix uses the false domain 1.wyciwyg-scheme instead of the real one
  • uMatrix reports what the Firefox API reports to it: Firefox should be fixed to report seamlessly wyciwyg:// URLs so as to avoid forcing extensions to deal with such URLs, which should be strictly for internal consumption by Firefox.
  • Until the issue is fixed in Firefox (if ever), a workaround in uMatrix has been implemented in order to deal with such URLs in a seamless manner in its UI.
  • Those URLs still cause quirks however: for example forcing a reload won't work. This is not a uMatrix issue, even Firefox's reload button does not work in such case. The workaround is to click the address bar as if to edit the current URL and press Enter to force a reload.
  • Core:
  • My rules tab hangs with cloud storage support

New in uMatrix for Firefox 1.3.13 Beta 1 (Aug 27, 2018)

  • uMatrix uses the false domain 1.wyciwyg-scheme instead of the real one
  • uMatrix reports what the Firefox API reports to it: Firefox should be fixed to report seamlessly wyciwyg:// URLs so as to avoid forcing extensions to deal with such URLs, which should be strictly for internal consumption by Firefox.
  • Until the issue is fixed in Firefox (if ever), a workaround in uMatrix has been implemented in order to deal with such URLs in a seamless manner in its UI.
  • Those URLs still cause quirks however: for example forcing a reload won't work. This is not a uMatrix issue, even Firefox's reload button does not work in such case. The workaround is to click the address bar as if to edit the current URL and press Enter to force a reload.

New in uMatrix for Firefox 1.3.13 Beta 0 (Aug 23, 2018)

  • uMatrix uses the false domain 1.wyciwyg-scheme instead of the real one:
  • uMatrix reports what the Firefox API reports to it: Firefox should be fixed to report seamlessly wyciwyg:// URLs so as to avoid forcing extensions to deal with such URLs, which should be strictly for internal consumption by Firefox.
  • Until the issue is fixed in Firefox (if ever), a workaround in uMatrix has been implemented in order to deal with such URLs in a seamless manner in its UI.
  • Those URLs still cause quirks however: for example forcing a reload won't work. This is not a uMatrix issue, even Firefox's reload button does not work in such case. The workaround is to click the address bar as if to edit the current URL and press Enter to force a reload.

New in uMatrix for Firefox 1.3.12 (Jul 17, 2018)

  • Placeholder iframe not shown on particular site using Firefox

New in uMatrix for Firefox 1.3.11 RC 1 (Jul 6, 2018)

  • Closed as fixed:
  • Placeholder iframe not shown on particular site using Firefox

New in uMatrix for Firefox 1.3.11 RC0 (Jul 6, 2018)

  • Closed as fixed:
  • Placeholder iframe not shown on particular site using Firefox

New in uMatrix for Firefox 1.3.11 Beta 0 (Jun 18, 2018)

  • New revision for dev build

New in uMatrix for Firefox 1.3.10 (Jun 11, 2018)

  • No web page found issue

New in uMatrix for Firefox 1.3.9 Beta 1 (May 15, 2018)

  • Closed as fixed:
  • Firefox:
  • No web page found issue
  • Core:
  • Custom recipes don't show up when visiting corresponding host

New in uMatrix for Firefox 1.3.8 (Apr 25, 2018)

  • Ruleset pane size miscalculated
  • Placeholder in logger "Network error" message is not replaced
  • Shared Workers

New in uMatrix for Firefox 1.3.7 RC (Apr 20, 2018)

  • Ruleset pane size miscalculated
  • Placeholder in logger "Network error" message is not replaced
  • Shared Workers

New in uMatrix for Firefox 1.3.7 Beta 4 (Apr 15, 2018)

  • Closed as fixed:
  • Ruleset pane size miscalculated
  • Placeholder in logger "Network error" message is not replaced
  • Shared Workers

New in uMatrix for Firefox 1.3.7 Beta 3 (Apr 14, 2018)

  • Closed as fixed:
  • Ruleset pane size miscalculated

New in uMatrix for Firefox 1.3.7 Beta 1 (Apr 10, 2018)

  • Closed as fixed:
  • Ruleset pane size miscalculated

New in uMatrix for Firefox 1.3.6 (Apr 10, 2018)

  • Improved the visuals and behavior of Recipes icon (the puzzle icon) in popup panel.

New in uMatrix for Firefox 1.3.5 Beta 3 (Mar 27, 2018)

  • CodeMirror's MergeView has been integrated into the "My rules" pane, this should make it easier to manage your ruleset.

New in uMatrix for Firefox 1.3.5 Beta 2 (Mar 25, 2018)

  • Changes:
  • CodeMirror's MergeView has been integrated into the "My rules" pane, this should make it easier to manage your ruleset.
  • Closed as fixed:
  • CSP error notification -> Conflicting with uBlock Origin?

New in uMatrix for Firefox 1.3.3 Beta 9 (Mar 6, 2018)

  • New:
  • A new button ("puzzle" piece icon) is available in the popup panel: uMatrix will offer you the ability to import community-contributed ruleset recipes which are relevant to the current page (see #30). Hopefully there will be many contributions to populate ruleset recipes ready to be used to unbreak sites.
  • A tooltip has been added to the global scope selector (*) in the popup panel.
  • A new setting has been added in the Settings pane: "Disable tooltips".
  • Changes:
  • The setting "Show the number of distinct requests on the icon" has been changed to "Show the number of blocked resources on the icon": the number of blocked resources is much more useful than the number of distinct resources. This will make it clear now that uMatrix is still blocking stuff even after you think you had configured it to no longer block stuff (example: #938).
  • The icon badge is back to being enabled by default with new installations of uMatrix.
  • Closed as fixed:
  • Report more accurately that resources are being blocked following page load
  • [Performance] Implement ability to snapshot memory to improve load times
  • When first installing uMatrix, the setting "Auto-update hosts files" is disabled by default

New in uMatrix for Firefox 1.3.3 Beta 8 (Feb 12, 2018)

  • New:
  • A new button ("puzzle" piece icon) is available in the popup panel: uMatrix will offer you the ability to import community-contributed ruleset recipes which are relevant to the current page (see #30). Hopefully there will be many contributions to populate ruleset recipes ready to be used to unbreak sites.
  • A tooltip has been added to the global scope selector (*) in the popup panel.
  • A new setting has been added in the Settings pane: "Disable tooltips".
  • Changes:
  • The setting "Show the number of distinct requests on the icon" has been changed to "Show the number of blocked resources on the icon": the number of blocked resources is much more useful than the number of distinct resources. This will make it clear now that uMatrix is still blocking stuff even after you think you had configured it to no longer block stuff (example: #938).
  • The icon badge is back to being enabled by default with new installations of uMatrix.

New in uMatrix for Firefox 1.3.3 Beta 4 (Feb 4, 2018)

  • import translation work from https://crowdin.com/project/umatrix

New in uMatrix for Firefox 1.3.3 Beta 3 (Feb 2, 2018)

  • new revision for dev build

New in uMatrix for Firefox 1.3.3 Beta 2 (Jan 31, 2018)

  • Import translation work from https://crowdin.com/project/umatrix

New in uMatrix for Firefox 1.3.2 (Jan 23, 2018)

  • Closed as fixed:
  • uMatrix does not report inline styles

New in uMatrix for Firefox 1.3.0 (Jan 22, 2018)

  • noscript tags improperly rendered in XML-based HTML documents (report).

New in uMatrix for Firefox 1.2.1 RC 3 (Jan 21, 2018)

  • Fixed:Fix noscript tags improperly rendered in XML-based HTML documents (report).
  • Closed as fixed:
  • No way to configure advanced settings in uMatrix/webext
  • Pages can detect uMatrix's presence with pure CSS

New in uMatrix for Firefox 1.2.1 RC 2 (Jan 18, 2018)

  • Notes:
  • Regarding the issue "uMatrix is causing iframe data to be mangled in the latest version of chrome":
  • I don't know what causes this -- uMatrix merely just add or modify a response header, as allowed by the extensions API. Until the root cause of the issue is resolved, you can mitigate it by changing the advanced setting disableCSPReportInjection to true in the new "More" dashboard pane.
  • Closed as fixed:
  • No way to configure advanced settings in uMatrix/webext
  • Pages can detect uMatrix's presence with pure CSS

New in uMatrix for Firefox 1.2.1 RC 0 (Jan 12, 2018)

  • Closed as fixed:
  • No way to configure advanced settings in uMatrix/webext
  • Pages can detect uMatrix's presence with pure CSS

New in uMatrix for Firefox 1.2.1 Beta 0 (Jan 8, 2018)

  • Closed as fixed:
  • No way to configure advanced settings in uMatrix/webext
  • Pages can detect uMatrix's presence with pure CSS

New in uMatrix for Firefox 1.1.21 Beta 6 (Jan 4, 2018)

  • Per-scope switches:
  • New switch: "Forbid web workers"
  • Purpose should be obvious.
  • Note that nuisance coin miners typically use web workers, so forbidding web workers globally might be a good idea, though mind that there are legitimate use for web workers. Keep in mind many of these miners are launched as 1st-party, so the new switch allows you to forbid them even when you allow 1st-party scripts.
  • uMatrix is able to detect when a web worker is being instantiated. However, this does not work for Firefox 57-58, but works fine in Firefox 59 (Nightly). The reason is that SecurityViolationPolicyEvent has been implemented just recently in Nightly.
  • So this means if you are using uMatrix with Firefox 57-58, uMatrix will be unable to report to you whether web workers are used by a page, though you will be able to block these fine with the new per-scope switch. With Nightly, use (or attempt to use) web workers is properly reported in the logger and in the popup panel.
  • Per-scope switches redesigned and renamed:
  • "Strict HTTPS" has been renamed "Forbid mixed content": I see too many instances of people thinking this feature is a replacement for HTTPS Everywhere: it is not.
  • The new visual will now convey whether a switch is relevant for the current document. A dot in the toggle button means that the switch is relevant, i.e. uMatrix may affect the page if the switch is toggled on.
  • Forbid mixed content: a dot means that mixed content has been detected on the page.
  • Forbid web workers: a dot means that web workers have been detected on the page (as mentioned above, the detection does not work for Firefox 57-58).
  • Spoof referer header: a dot means that 3rd-party referrer information has been seen in network traffic.
  • Spoof <noscript> tags: a dot means <noscript> tags have been detected in the current page.
  • I added info links to each per-scope switch: the links are pages from Mozilla Developer Network, so this gives a chance for the page to load in the user locale.
  • Logger:
  • Ability to open the logger in the sidebar. Sidebar API is only available in Firefox and Opera

New in uMatrix for Firefox 1.1.21 Beta 5 (Jan 3, 2018)

  • Appearance:
  • More choices of text size for the matrix UI in the Settings pane (text size dictates the popup panel size).
  • Per-scope switches:
  • New switch: "Forbid web workers"
  • Purpose should be obvious.
  • Note that nuisance coin miners typically use web workers, so forbidding web workers globally might be a good idea, though mind that there are legitimate use for web workers. Keep in mind many of these miners are launched as 1st-party, so the new switch allows you to forbid them even when you allow 1st-party scripts.
  • uMatrix is able to detect when a web worker is being instantiated. However, this does not work for Firefox 57-58, but works fine in Firefox 59 (Nightly). The reason is that SecurityViolationPolicyEvent has been implemented just recently in Nightly.
  • So this means if you are using uMatrix with Firefox 57-58, uMatrix will be unable to report to you whether web workers are used by a page, though you will be able to block these fine with the new per-scope switch. With Nightly, use (or attempt to use) web workers is properly reported in the logger and in the popup panel.
  • Per-scope switches redesigned and renamed:
  • "Strict HTTPS" has been renamed "Forbid mixed content": I see too many instances of people thinking this feature is a replacement for HTTPS Everywhere: it is not.
  • The new visual will now convey whether a switch is relevant for the current document. A dot in the toggle button means that the switch is relevant, i.e. uMatrix may affect the page if the switch is toggled on.
  • Forbid mixed content: a dot means that mixed content has been detected on the page.
  • Forbid web workers: a dot means that web workers have been detected on the page (as mentioned above, does not work for Firefox 57-58).
  • Spoof referer header: a dot means that 3rd-party referrer information has been seen in network traffic.
  • Spoof <noscript> tags: a dot means <noscript> tags have been detected in the current page.
  • I added info links to each per-scope switch: the links are pages from Mozilla Developer Network, so this gives a chance for the page to load in the user locale.

New in uMatrix for Firefox 1.1.21 Beta 2 (Dec 22, 2017)

  • Appearance
  • More choices of text size for the matrix UI in the Settings pane.
  • Per-scope switches
  • "Strict HTTPS" has been renamed "Forbid mixed content": I see too many instances of people thinking this feature is a replacement for HTTPS Everywhere: it is not.
  • The visual of the per-scope switches will now convey whether a switch is relevant for the current document. A dot in the toggle button means that the switch is relevant, i.e. uMatrix may affect the page if the switch is toggled on.
  • Forbid mixed content: a dot means that mixed content has been detected on the page.
  • Spoof referer header: a dot means that 3rd-party referrer information has been seen in network traffic.
  • Spoof <noscript> tags: a dot means <noscript> tags have been detected in the current page.
  • I added info links to each per-scope switch: the links are pages from Mozilla Developer Network, so this gives a chance for a page in the user locale to load.

New in uMatrix for Firefox 1.1.21 Beta 1 (Dec 18, 2017)

  • Changes:
  • More choices of text size for the matrix UI
  • "Strict HTTPS" has been renamed "Forbid mixed content": I see too many instances of people thinking this feature is a replacement for HTTPS Everywhere: It is not
  • I added info links to each per-scope switch
  • The links are pages from Mozilla Developer Network, so this gives a chance for a page in the user locale to load

New in uMatrix for Firefox 1.1.20 (Dec 14, 2017)

  • Settings:
  • A new option in the Settings pane, as requested in #335:
  • Collapse placeholder of blacklisted elements
  • Checked by default.
  • The purpose of this new setting should be obvious: it makes it possible to collapse discriminately elements according to whether they were blocked as a result of a hostname being blacklisted or as a result for a more generic block rule.
  • For example, 3rd-party iframes are blocked by default. But you may not want embedded Youtube videos to be collapsed, while on the other hand you may want embedded ads from some blacklisted origins to be visually collapsed. The new settings allows to distinguish between blocked and blacklisted.
  • Logger:
  • The logger will now inform when uMatrix removes/modifies HTTP headers:
  • As seen above, the uppercase COOKIE entry means that an outgoing Cookie header was removed, and the uppercase REFERER entrie means that an outgoing Referer header was modified from https://news.ycombinator.com/ to https://danluu.com/. These are reported only for network request of type doc, so as to not spam logger output since referrer spoofing and cookie header removal can occur for every single network request.
  • Closed as fixed:
  • Core:
  • Blocked images download but only briefly display when loaded directly
  • Remove Referer instead of spoofing it for non-GET requests
  • SVGs not interact properly if scripts are blocked (though it says 0 scripts in the page)
  • Script not detected on cgit commit page
  • Collapse placeholders for blacklisted hostnames

New in uMatrix for Firefox 1.1.19 RC1 (Dec 13, 2017)

  • Settings:
  • A new option in the Settings pane, as requested in #335: Collapse placeholder of blacklisted elements. Checked by default.
  • The purpose of this new setting should be obvious: it makes it possible to collapse discriminately elements according to whether they were blocked as a result of a hostname being blacklisted or as a result for a more generic block rule.
  • For example, 3rd-party iframes are blocked by default. But you may not want embedded Youtube videos to be collapsed, while on the other hand you may want embedded ads from some blacklisted origins to be visually collapsed. The new settings allows to distinguish between blocked and blacklisted.
  • Logger:
  • The logger will now inform when uMatrix removes/modifies HTTP headers.
  • As seen above, the uppercase COOKIE entry means that an outgoing Cookie header was removed, and the uppercase REFERER entrie means that an outgoing Referer header was modified from https://news.ycombinator.com/ to https://danluu.com/. These are reported only for network request of type doc, so as to not spam logger output since referrer spoofing and cookie header removal can occur for every single network request.
  • Accepted pull requests:
  • Fix noscript spoof setting not being saved on change
  • Close as fixed:
  • Core:
  • Blocked images download but only briefly display when loaded directly
  • Remove Referer instead of spoofing it for non-GET requests
  • SVGs not interact properly if scripts are blocked (though it says 0 scripts in the page)
  • Script not detected on cgit commit page
  • Collapse placeholders for blacklisted hostnames

New in uMatrix for Firefox 1.1.18 (Dec 13, 2017)

  • Closed as fixed:
  • Core:
  • Completed fix to "<noscript> is ignored when uMatrix blocks JavaScript"
  • Automatic redirect when there is a meta http-equiv="refresh" ...> tag present.